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SYSTEM AND METHOD FOR LICENSING CONTENT 
Field of the Invention 

The present invention relates generally to systems and methods for controlling 
and monitoring use of computer programs and other digital content, and more 
5 specifically to systems and methods for embedded licensing information in the 

computer programs and other digital content and for controlling access thereto in a 
distributed computer environment. 

Background of the Invention 

10 The Internet, and particularly the World Wide Web ("web" or "WWW') within 

the Internet, has become a popufcr vehicle for widespread access to content of nearly 
arbitrary kinds, including formatted text, graphics, audio, video, and interactive 
programmed content. Associated with various types of content are conventions, 
formats, or languages for its representation as strings of bits or characters when stored 
as files or communicated over a network. Although many content representations are 
known, currently popular representations include HTML for formatted text, JPEG for 
images, and JAVA for programs. Additional content representations are continually 
being developed. The CURL language, developed at the Massachusetts Institute of 
Technology {Curl: A Gentle Slope Language for the Web, M. Hostetter, D. Kranz, C. 
20 Seed, C. Terman, S. Ward, MIT Laboratory for Computer Science World Wide Web 
Journal, Volume 11. H, Issue 2, Spring 1997), is designed to represent a variety of 
different types of content within a single language. 
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Typically, content mus.be processed before it is presented toauser. Such 

the content, represented in some identifiable ianguage, fro. either a locai storage 
.nedium (i.e., CD-ROM or hard disk) or remote computer (the -server") and » 
, "executes," "interprets," or "processes" the fetched content appropriately. It shou.d be 
noted that executing, operating on, and interpreting are a« forms of processing content 

and used interchangeably herein. 

Generally,^ appropriate type of processing is readily apparent from the type 

n.yincludedisplaying the image onacomputer monitor for viewing by the user. 

content ^tted withal MIME type would be understood to be 
rfo content to be p.ayed for a user to hear. Note, however, that other types of 
, 5 processing may be performed, such as displaying audio content using a smtable 
notation system so that it may be edited. 

On the web, the acts of fetching and processing content are typically performed 
by a client application cal.ed a "browser" such as Microsoft Internet Explorer and 
Netscape Communicator, available from Microsoft Corporation, of Redmond, WA, 
20 ana Netscape Commumcauons Corporation, of Mountain Vtew, CA, respectively. 

Tnese browsers include the capability of processing severa, common types of content 
induding HTML text, JPEG images, and Java programs, among others. These 
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though loadable software modu.es commonly referred to as plug-ins. 

When a browser attempts to feteh or load a non-native type of content, the 
bro wser,oadsaplug-massociated with the content type. Control is then passed to the 

p^ntoprocessthe^t. !f. appropriate p,u g -in is not avau^le to the browser 

another source, typically as server on the Internet. 

F or example, whenabrowser fetches content comprising a CURL program, 

tneCURL language. Thismay comprise compiling the CURL source code and 

fetched by the browser, control is passed to the CURLianguage plug-in wtthout 

having to reload the plug-in. 

One reason for the success of the web is its promotion of unencumbered 
communications. An unambiguous identifier of information (e.g., a Uniform Resource 
Locator or URL)is typically all that is needed to enable access to content, a feature 
that has promoted the rapid evoiution of the web intoarich nexus of interrelated 
content, ^r^^***-********'"*''* 

^ easy access to useful web content removes the motivation of those who enjoy ,ts 

U is difficult to control access and thus charge for information and serv.es. 
Consequent*, typ.cn for-profit publishers of valuable content, such as computer 
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program research reports, timeiy sports scores, stock market information, and the 
^ofthecomnroditytheyprovide. 

cod ed content as W eU as the chent software, or piug-in, needed to interpret the 
content, access restrictions may be apphed to the content itself, to the plug-in, or to 
both. 

Typical access restriction measures in current use tend to impede the open 
unencumbered communications that are the hallmark of the web. Such restrictions 

0 numb erattachedtoaspeci fi cco m puterandthususedtounlockthesoftwareor 
content. Password mechanisms can effective* limit the use of the software to a 
specific individual and/or specific machine but at the sametime impede the web's 

or provider of content m ust be provided a password to unlock the software or content. 

Othermechamsmsincluderemovablehardwaredevices,commonlyreferredto 
asaMongle,"containmgaum q uelicenseke,Thes,dev 1 cesareadaptedtoconnect 

t0 a general-purpose communications port or specific interface of a client compute, A 
aeviceeach time the softwareis activated to determine whetherthesoftwaremay be 
20 run 

devices, fails to scaie for widespread use and thus impedes unencumbered 
communications. 
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Networked computer environments provide further licensing challenge, The 
terms of the traditional single-computer software license might no, property cover 
usageof software onanetwork or may unintentionally allow suchausage without 
additional compensation to thehcensor. F or instance, what form of license should be 
5 used when a user at one cUent uses software running on a second client. One solution 
U to grant a license to use the software on any computer connected to the network. 
This is known as an unlimited site license. Alternatively, a license, called a limited site 
Hcense, may be retired for each machine on which the software is to be run. While 
this may increases fees the licensor may collect, it may also retire the licensee to pay 

10 for more licenses than are actually needed. In addition, this mechanism requires 

cooperation from the licensee to contact thehcensor as additional nodes are added to 

the network. Add.tiona. non-automated mechanisms may be required monitor 
programusageand verify hcense compliance. F or examp.e, a licensor may require a 
Uce.eekeepaccuraterecordsofusage, and may demand the right to periodical* 
, 5 inspect the hcensee's site to audit program usage; dearly, an inefficient and intrude 
process. 

masituationwherealicensordevelopstoolsusedbyalicenseetocreate 

an accurate accounting of theuseofthe licensed tools, while the ultimate end-user 
20 wantsunencumberedacoesstothecontentwithoutpasswordsandlocksThehcensee 

is thus caught between providing the licensor an accurate accounting for determmmg a 
Ucense fee while a, the same time providing easy access to the end-user. Current 
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rnechanisrns that satisfy the licensor have an unfavorable impact on the end-user, and 
visa-versa. 

Moreover, the developer of content might wish to encourage multiple levels of 
licensing to the end-user. The levels of licensing may run from free access to the 
product for certain uses, such as for evaluation or non-commercial use, to fee-based 
access for commercial use, wherein a fee is charged based on usage of the licensed 
product. 

Conventional access restrictions constitute an impediment to free access by 
users, since such users must typically "register" with the access control mechanism or 
deal with an electronic bureaucracy. They are also an impediment to fee-based access 
because of the overhead required to monitor licensing compliance. Thus, present 
licensing technologies do not provide a broad mechanism capable of covering such 


Summaryofthe Invention 

The invention provides a new and improved method and system for licensing 
content and for licensing access to functions provided by a plug-in, application, applet, 
or other software used to process the content. The invention, therefore, facilitates the 
distribution of both revenue and non-revenue generating content on the Internet. 
20 This is achieved by embedding, within the content, licensing data referred to 

herein as a licensing form. The licensing form itself is related to the type of license 
under which the content is made available. Software designed to process the content 
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includes routines for recognizing and validating a license form embedded in the content 
and limiting processing of or access to the content pursuant to the validity or terms of 
the license. 

Therefore, it is an advantage of the invention to support a lieensing mechanism 
by which the provider of software utilized in the interpretation of web content may 
Ucense the use of that software for commercial purposes without controlling access to 
either the software or the content. 

Further advantages of the invention include the ability to allow noncommercial 
or other specific use of the software, as well as anonymous use of the software. 

Additional advantages of the invention allow the licensor to monitor licensed 
usage, to revoke the license as desired, and to charge fees based upon the usage ofthe 

software by the licensed content. 

In addition, it is also an advantage of the invention to utilize a plain-text 
assertion embedded in the content stating that the content is for non-commercial use. 

, 5 Further advantages of this invention provide for multiple licensors, each 

administering separate licenses pertaining to interdependent content modules. 

Other advantages of the invention will become apparent to one of ordinary skill 
in ,he art in view of the figures and detailed description of the embodiments of the 
invention. 
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Brief Description of the Figures 

The foregoing advantages of the invention will be more readily understood by 
reference to the following description taken with the accompanying, drawings in 
which: 

5 FIG. 1 is a block diagram illustrating a computer system with a plug-in or 

application for receiving licensed content according to the invention; 

FIG. 2 is a block diagram illustrating a computer system with a plug-in or 
application for receiving licensed content and a server for providing such content 
according to the invention; 
10 FIG. 3 is a block diagram illustrating the composition of the {License ...} form 

according to the invention; 

FIG. 4 is a block diagram illustrating interactions between a computer system 
with a plug-in or application for receiving licensed content, a server for providing the 
licensed content, and a license server according to the invention; 
15 FIG. 5 is a simplified flow chart illustrating steps performed by a plug-in when 

determining the type of license embedded within content being processed in 
accordance with the principles of the present invention; 

FIG. 6 is a simplified flow chart illustrating steps performed by a plug-in of the 
invention when validating an implicit license; 
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FIG. 7 is a simplified flow chart illustrating steps performed by a P lug-in of the 
present invention when validating an implicit license containing a content 
authenticator; 

FIG. 8 is a simplified flow chart illustrating steps performed by a plug-in of the 
5 invenfion^vafidatmganimpUcitlic^— g a content author and 
further determining an access policy; 

FIG. 9 is a simplified flow chart of steps performed by a plug-in of the 
invention when validating anexplicit license contaimng a content authenticator, and 
further incorporating the useofacache of valid license results and grace period; 

FIG. 10 is a simplified flow chart Uhutrating a portion of the steps performed 
by a server in accordance with the prindp.es of the present invention when validating 

of a cache of valid license results and grace period; 

FIG. 11 isablockdiagramofinteractionsbetwe^nacomputer system witha 

content, and two license servers according to the invention; and 

FIG. 12 is ablock diagram illustrating environments created during multi-level 
licensing. 
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20 


Detailed Description of the Preferred Embodiments 

The following description is illustrative of a preferred embodiment of the 

.tentative embodiments of this invention * be apparent to those skilled in the an 

The inventionfacUita.es the widespread use and distribution of computer 
programs yet provides developers of those computer programs a mechanism for 
garnering a financiai return. This is accomplished by retaining control over the 

operation of the computer programs. 

In a first embodiment, the invention comprises a freely distributed software 
m odule, program, orp.ug-inthat runs on a computer to procss digital content. WhUe 
processing the content, the module searches for data comprising a specia! licensing 
form, asdescribedbelow. The licensing form must be present in the content for 
processing of the digital content to be authorized. 

The module interprets the licensing form and authorizes processing of 

eg non -cornmerdalor<— ^ 

The moduie also recogruzes Ucensing forms of a commercial nature and can impose 


PCT/US00/06242 

WO 00/54128 


10 


15 


-11- 


20 


use ) prior to accessing the computer programs. Thus, the module has a built-m 

^enthyaUowing^accesstothe^pcogramsfornon.o^^ 

t0 receive a financial return by requiring a license fee for commercial use. 

FIG. 1(a) and FIG. 1(b) are block diagrams of illustrative embodiments of a 

^ operating system 101. Computer 100 canbe a conventional person, 
computer such as those sold by Compaq Computer Corporation, IBM, and Apple. 

Apple OS, and the like. 

With reference to FIG. .(a), a first embodiment of the invention uses browser 
102 asasubstratefor plug-in 103. FIG. 1(b) illustrates an alternative embodiment of 

,« IntheembodinrentofFIG. 1(b), the mechanism for controlling access to a 
computer program is included within the computer program itself; however, one of 
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20 


ordinary skill in the art would appreciate that the access controlling portion may be 
separated from the underlying computer programs. 

The hrowser-plug-in combination, or ecmvalently application 104, is designed 

particularly are designed to recognize the licensing mechanism as taught by the 
generally to plug -in 103 operadng in conjunct with browser 102, it is understoodby 

therewith. 

Turning nowto F IG. 2 , the genera, operation of plug-in^ is described as it 

technics. Contents, is coded in a language or representation (such as the CURL 
Language) that plug-in 103 can ultimately process and may comprise a single 
component or a set of re ,ated components, such as web pages or program module, In 

Hcensed together asawho.e, as we,, as individually, in groups, or some combinauon 
thereof. 

Under the invention, content that is licensed to operate under plug-in 103 is 
encode the content itself. 


PCTAJSOO/06242 

WO 00/54128 


10 


15 


-13- 


20 


For simplicity, the invention is described herein using non-encrypted 
pl ain text CURL language source code. CURL language constructs are typically 
delimit edby curlybrac.ets. 
CURL construct such as: 

{ square 9.0 } 

According* a suitab.e Ucensing fonn using CURL syntactic conventions .nay comprise 
a CURL language construct such as: 

{Licensed . . • } 

A variety of ahemative representations (e.g., HTML, Java, XML), data*,™ 
(e g text, graphics, executable code), and encodings (e.g., text, binary, or encrypted 

and encodings to support the present invention tnay use any convenient alternate 

form used in CURL source code extends the CURL language, 
syntax 

<LICENSED> ... </LICENSED> 
while inCor Java it might take the form ofalanguage construct such as 
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Licensed . . • ; 

^tionsothattheaadeai— on is un^iguous,, d^shabie fr o m the 
; remaining content. 

Whatever the representation, plug-in 103 is adapted to detect such appropriate 
{L ,censed...)fonnin every file delivered to it for execution, and to reftise execution 
of any file missing a valid (Licensed ) for.. Such refusal may be reported to the 

o.aplu^-ybeoperationaio^yforaspecifiedpeHodoftinte.Inaddi^^ 
additional information in the {Licensed ...} form. 

osefu. processing of content 20, until it has encountered a {Licensed ...} form 
contained within content 201. Typically, such {Licensed ...} forms will be at the 
beginning of each content file so that remaining content may be processed 

t J • f «h» (T icensed 1 form. Alternatively, some portion 
incrementally after validation of the (Licensee ...) 

he nrocessed in parallel with detecting and validating the (Licensed 
20 of the content may be processea in p.u<u 

...} form. 
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The {Licensed ...} form is used by plug-in 103 to control access to 
content 201, to plug-in 103 itself, or both. In other words, {Licensed ...} form 203 is 
processed by plug-in 103 to determine the extent to which content 201 is to be 
processed. Depending upon information in {Licensed ...} form 203, the final 
processing of the content 201 and the functionality of the plug-in 103 can be 
controlled. Thus, when content 201 is interpreted by client 100, its contents are 
delivered to plug-in 103, {Licensed ...} form 203 is extracted and processed, and 
plug-in 103 executes or interprets content 201 to the extent allowed by {Licensed ...} 
form 203. 

FIG. 3 is an illustrative embodiment of a license for in accordance with the 
principles of the present invention. {Licensed ...} form 300 may contain a variety of 
information, including: 

asatayjjf. License 301 - this information identifies the licensee. In one 

embodiment of the invention, this information comprises plain text but in other 
embodiments it may be encrypted. The licensee is the party providing content 
201 to be processed by plug-in 103, e.g., the content creator. 

I^galAssertion 302 - this identifies the legal form of the license. In a first type of 
license form this field indicates that the licensed content may be distributed 
without payment of a royalty under a non-commercial use license. In other 
types of license forms this field specifies a type of license. The form of the 
assertion should be appropriate for the intended use of the content, and is 
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preferablyaplain tex, string containing a legal assertion as to the nature of the 
Ucense. It is anticipated that the assertion is appropriate for the licensee's 
jurisdiction and conforms to the laws governing the licensee and so that it may 
be used to judicially enforce the licensor' s rights. 
5 gncaded/EngQEisiDMa. 303 - This portion of licensing form 300 includes a 
variety of data and may be provided in encrypted form. This data may be 
encoded asasequence of plain-text characters using known techniques such as 
uuencode. In the exempla-y licensing form for use with CURL source code, 
the data is quoted so that it becomes a syntactically legal element of the 
,0 ,anguage(vi,,aquotedstring). Significant functions sen,ed by the encoded 

binary data are: 

,. Secure identification of the licensee and the specific contractual 
arrangements pertaining, to the license; 

2. Authentication of the content to detect tampering or modification of the 
1 5 contents and/or licensing form; and 

3 . Memorializing the content of a license applying to the content. 
The following are examples of data that may be encoded/encrypted. 

304 - Represents the identity of the license. This can be used to confirm 
the identity ofalicensee and may beatext string or numeric identifier. For 
20 example.aparticularcont^ 
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may be assigned a unique identifier C. Reliable encoding of identifier C in 
{Licensed...} fonu 300 then serves to identify the licensee and contractual 
arrangements - the first of the noted functions. 
TJmm£sM 305 -Aperiod in which the license is valid. Can be used as an 
5 optimization of the verification phase of the license. 

G^cePeripd 306 - Period of time to allow use of the content without verification 
of the license. Can be used as an optimization of the verification phase of the 
license. 

U^^MSM® 307 - Extent of the license. This data can be used as part of a 
,0 mechanism to control access to the plug-in functionality on a 

module-by-module basis. This enables licensing of only a portion of the 
functionality of plug-in 103. 

Verigcatjonjit^ 308 - One or more network locations where an authorization 
and verification server for the content license may be found as firrther explained 

15 herein below. 

mmM 309 - An identifier used to identify the end user, the party actually 
downloading the content. This would allow a mechanism to track usage by the 
actual end-user of the content. 
.,.,,^^, io nCode310-lnformation to verify that rite code attached to the 
20 license has not been corrupted or tampered with. Implemented via a Message 
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Authentication Code or MAC computed from the remainder of the file, using 
known techniques (such as cipher-blocx chaining), thus providing the second 
noted function. 

5 ^digitalcontentishcensed.Thismaycompriseforexamp.eacryptographic 
hash or MACcomputed from the text ofthe license which may be used as 
evidence of the terms of the license. Optionally the hash may be digitally time 
stamped and signed by the parties involved. 


10 


One of ordinary skill in the art would understand that additional data fields 
might be provided within {Licensed ...} form 300. 

,„ accordance with the principles ofthe present invention. (Licensed ...} form 
300 enables a licensor to implement different types of licensing schemes, or policies, 
for content. For example, a plug-in creator may choose a licensing policy that 
15 encou^esuaeofaplug^forc^n^such.fornon.on^useor 

for product evaluation. To support such a licensing policy p,ug-in 103 may accept 
cert ainvariantsof(Lic,nsed...}form300withoutm rt herva.idation. Thistypeof 

(Licensed . . } form is termed an implicit license because the plug-in has sufficient 

built-in information to grant access. 

20 An exemplary implicit (Licensed ...} form may comprise: 
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This form contains only a plain text, legally binding assertion appropriate 

5 quires no further licensing arrangements. In this approach, the licensor depends 

upon the plain-text legal assertion within the (Licensed ...} for. itself stating clearly 
the non-commercial nature of the content license. The legal assertion is readily 
viewable by anyone with viewing the content, and clearly states the intended 

non-commercial nature of the content. Alternatively, when the content is processed a 
commercial nature. 

Aplu g-in creator may instead choose a licensing policy that encourages use of 

access. Thus, in another embodiment of the present invention, plug-in .03 is adapted 
t0 require further validation of certain variants of the {Licensed ...} form 300. Th,s 
tvpe of licensed ...} form is termed an explicit license because plug-in 1 03 has 
insufficient built-in information to grant access, and must resorting to external 
information to validate the license form. 

An exemplary explicit {Licensed ...} form may comprise: 

20 ^^SMomoET"! ooi^ofooiSoooiooiooi"..) 

WhereinXVZ Computer Corporation identifies the. lessee and the sequence 
of binary digits represents additional encrypted information 303 of FIG. 3 This 
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sensed , formmay be dished ft. the prior form by the content of the 
Ucensefon.^ For example, the second word or term ofme two exempt 

the {Licensed .. . } forms win be apparent to one skilled in the art. 

d ^^I«--^^ WP,,a,, - 4,V,l * ta,,B " 
otherwise tampered with. The current status of the license referenced by the 

\q maintained by a Licensor. 

40 3 and content server 2 00in accordance with the princi^esofthepresentinvenUo, 
CUenUOOsendsre^Otfor content 2 01 over a network, such as the Xnternet, to 
content server 200. Content server 200 sends re s P onse 402 back to chent 100 
, 5 contain^ revested content 20! . Plug-in 103 then scans content 20! for a 

201 .Ifa{Licensed...)formisfound, it is interpreted and verified by plu g -in ! 03 ,n a 
„ dependant upon the contents ofthe {Licensed ...} form. 

F0 r explicitly licensed content, {Licensed . . . > form 300 contains at least a some 
20 encode d i rf ormationasshownhyencodedinforma t ion303ofHO,.Toveri, to 
formO flicensep.u g -in 1 03createsUcensevalidationre <1 uest404basedinpan 
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(Ucensed^^BOOandencodedinfon^naOS contained therein. License 
nation request 404 is sent to authorization server 403. 

server 403 may bethe same server as content server 2 00, but m 

contents of license database 406 which is discussed further below 

The flow charts of FIGS. 5-10 illustrate an exemplary sequence of steps 
perfonnedbv embodiments of p,u g -in 103 when validating a (Licensed ...) form. 

plug ,n 103 is in an initial statereadytoretrievecontentlocatedonaserver. !nste P 
m P ,u g ,nl03retrievesthecontent fr omtheserver. Retrieval may be initiated by 
.e'userorunderoperationofpreviously.oaded.ntent.Porexample.ausermay 

.echanismforretrievinscontentfromthe server is provided by the underlying 
^onthepb.-mndghtindudethe^tnecha.sm. Forinst^ 
code implementing a retrieval mechanism directly. 
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At step 502, the plug-in scans the content for the {Licensed ...} form. 

.canning the content. Ifthereisno (Licensed ...} form within the content, it is 
signaled as an error, step 504, and the plug-in exits this routine, step 505. 

Assuming at least one (Licensed . . . > form is found, it is decoded to determine 
the type oflicense, step 506. The plug-in branches at step 507 depending upon the 
type of (Licensed . . . } form found in the content. As described herein, there are two 
basi c types of license, implicit and explicit; however, it is anticipated that other forms 

10 508, otherwise it branches to steps 509. 

Turning now to FIG. 6, if the (Licensed . . .} form specifies an implicit license, 
the vaUdity of the license is now checked. At step5,0, the implicit Ucense is checked, 
for example, by simply matching a text string in the (Licensed...) form containing the 

M an^pliedhcensemaymcludecomparingtheresultsofahashorotherfUnctmn 
applied to the legal assertion to a value stored by the plug-in. 

At step 51L ifthe license check Wis, the plug-in executes any necessary error 
operations, step 512, and exits the function at step 513. If the « check passes, the 
pfcg-in operates on the contentto the extent aUowedby the license terms and the 

content, this function is exited at step 515. 
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addition* information needed to validate the license. At step 550, the encoded 
information is decoded. Depending upon the encoding, a variety of ieveis of security 
surrounding access to the encoded information can be provided. For instance, the 

data. 

At step 551, a MAC of the contents is computed and compared to MAC 310 of 
{Licensed...} form 300 to determine whether the contents have been corrupted or the 
{Licensed ...} form has been illegally generated or copied. If the computed MAC is 
0 not acceptable, step 553, an error condition is signaled, step 553, and the routine exits 
554. If the computed MAC is authentic, at step 555 a cache is checked to see if a 
prior approved {Licensed . ..} form applies to the content under examination. If a 

.updated at step 557 (to allow for aging ofthe entry via an access count, usage linut 
1 5 or other aging mechanism). 

If there isn't a valid cache entry, then a license server needs to be contacted at 

the encoded information (303 of FIG. 3), specified by another server, or built into the 
content. The plug-in attempts to contact the license server and pass the necessary 

Ucense. The necessary information can include one or all ofthe following: licensee 
identity, content identity, user identity, machine identity, contract identity, use count, 
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etc. Preferably, the information is passed to the license server via a secure 
communications link as known in the art to protect the communications from 
interception. 

One important aspect of the invention is that some of encoded information 303 
of FIG. 3 may be stored on the license server and a reference to the data stored in the 
{Licensed ...} form. For instance, the license server may specify a timeout period for a 
cache entry associated with specific content, an additional verification site, another 
mo dule that the license applies to, or a grace period applicabie to the content, etc. 
Thus, by storing some information on the license server, the vaiues can change across 
al, accesses ofthe content without requiring a change to the (Licensed ...} forminthe 
content. In addition, with a user or machine identification, a customized access policy 
can be created on a per machine or per user basis. Finally, even if the encoded 
information (303 of FIG. 3) includes certain information, that information can be 
overridden by information found on the license server. 

If the license server does no, respond, additional license servers may be queried 
if the location of more than one license server is provided in verification sites field 308 
of FIG. 3. Otherwise, at step 561, a grace period may apply, step 562, even if there 
isn't a cache entry nor a response from the server. A grace period is an optimization to 
enable disconnected operations. For instance, content may be stored on the user's 
ntachine for ,ater access. If the user is not connected to a network containing a license 
server, then without a cache entry from a previous access, operation ofthe content 
would be denied.Agrace period allows the content to be usedacertain number of 
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times, or for a certain time period, without requiring access to the license server. If the 
grace period is expired, step 563, an error is signaled, step 564, and the content is not 
operated upon and the routine exits, step 565. If the grace period applies, and is valid, 
then the content is operated to the extent allowed by the liconse, step 566, and the 
5 routine exits. 

FIG. 10 illustrates the steps in contacting the server for one embodiment of the 
invention. If a server responds, we enter at step 568. The response from the license 
server will typically include additional information, as already noted. The information 
received is used to validate or invalidate the license. If the response invalidates the 
10 license, step 570, then an error is signaled, step 571, and the routine exits, step 572. If 
the response validates the license, then an entry is created in the cache for the content, 
step 573, and the content is operated on to the extent allowed under the license, step 
574, and the routine exits, step 575. 

FIGS. 5-10 are only meant as examples of various embodiments of the 
,5 licensing mechanism. One of ordinary skill in the art can appreciate that additional 

extensions and modifications are possible. For instance, the information contained in 
the {Licensed ...} form can be augmented, the information stored on the server can be 
augmented, the encryption and encoding algorithms can be changed, the 
communications method can be varied and all fall within the scope of the invention. 


20 Extensions 
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Although the user computer-authorization server exchange can be made quite 
brief, it does add a small overhead to each execution of the Ucensed content. As 
a^eady shown, this overhead canbe reduced by caching the server response on the 
cl ien t(e. 6 .,withina"cookie" or similar client state), along with a specified timeout 
interval used to control its fife. The cached result may thenbe applied to future 
retrieval of related content. When requested to execute a Ucensed file, the plug-in 
^checkHsloc^cacheforreUtedr^^thevaJidityofth.^ 

...} form. Thus, the plug-in need only exchange messages with a license server if there 

were no such cache entry or if the cache entry has expired. 

Caching prior license approvals also reduces the number of license validation 
quests that must be sent to a license server. The number oflicense validation 
quests may be reduced even furiher by allowing cache entries that applytomuitiple 

(Licensed ...) forms. For example, a cache entry may validate all (Licensed ...) forms 
having a specified content, naming a specified licensee, or originating from a specfic 
15 domain are valid. 

Various implementations of the timeout mechanism are possible. For instance, 

p lug ,„), specified withinthe (Licensed ...) form, or specified by the Licensor's server 
inits response to the validation request. The timeout interval may be based upon 
20 passage of time, number or accesses or a combination thereof. 
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ta addition, the reiationship of the cached server response with future content 
retrieved bythe user can aiso be configured. For instance, if the content is organized 
in ahierarch y ,the cached response for a particular node can apply to that node and an 
nodes.ower.nthehierarchyorahmitednunrheroflowernodes. Thus.acached 
5 .esponseforawebpagemayapplytoallwebpageswithinthesamedomain. 

Mernatively, the (Licensed ...Ifonnorthe response from the server can specify the 

to support the licensee's particular content. 

An alternative to the validation steps illustrated in FIGS. 5-10 above is to 

and then in parallel with operation on the content. Front the user perspective, this 
could eliminate or diminish any delays caused by the interactions between user 
confer and the license computer prior to validation and thus operation of the 
\ 5 content. 

To save client storage and minimize the size of a (Licensed ...} form, a portion 
of it may be digested via a cryptographic hash fitnction such as MD5.SHAf.or other 

& Sons, 1996) into a smaller form to be compared against stored values. 
20 Alternatively, the plug-in might deal with all (Licensed ...} forms by contacting s 

Ueense server, sending a validation request containing, a short cryptographic hash of 
the form, and then caching the result to avoid the need for firture valtdations. This 


PCTAJS00/06242 

WO 00/54128 

-29- 

^oftheUoen.o^athe^ses^.Ina^on.theuseofac^^ 

Encoded information303 of FIG. 3 of (Licensed ...) 

M^-o n ofencoded i „fo n na ti on303 is s h ow„asfoUow S : 

Encode ( 

Encrypt ( 

APP H e a n shUppend(C (M AC(r em ainder of file) ) ) - 
c 

MAC (remainder of file) 

) , 

SecretKey 

) 

^KPPend s imP , y — es^bUs^srepresendngi^^HasU 
computes a noninvertible cryptographic hash of its arguments, 
Encr vp t ( b its, Key, isastandardencryptionschemesuchasDES.and 

Encod e is a character encoding function such as encode. SecretKey ■ a 
s ^ etri cencr y ption k e yk nownora y to«heUcensor.Thehashingandencr y ptron 

the C and MAC components of the encoded 
steps discourage attempts to separate the C and ma 

binary data and recombine them in forged {Licensed ...} forms. 

Since occasionai re-vaUdatron of each explicit (and some versions of rmplicn) 
acnseis^uired.aUcenseservermaycoUectandstoreinadatabasedata 
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^arough.odeUftheactWeuserbas.sewedbyeachUce.e.THeUcensor^ 
for example, send weekly repons to each licensee relating the number of active users, 
and perhaps asking the hcensee to renegotiate a license if the number exceeds the 
terms ofthe current license. Alternatively, a plug-m may include the capability of 

by the user. 

In addition, a licensor may specify cache timeout values, the scope of cache 
entries, and organize content in suchawaythat the licensor may generate reports on 
the secuenc or flow of access through the content on a content server, and thus be 
0 able to identify those content areas that are over or under utilized. 

In the embodiments of the invention described herein, the invention is designed 
so that substantive processing of the encoded binary data can happen entirely on the 
server freeing client software from the need to include sophisticated encryption 
routines. However, in accordance with the principles of the present invention, these 

desired, using network communication with standard security measures as necessary. 

I Generation 

Foralicensee to create content licensed for use with the plug-in, the licensee 

must he able to affix the cryptographic {Licensed ...} form to the created content. To 
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20 


input an unlicenced ffle and affixes the appropriate (Licensed ...} form to it. 
Freferably.theUcense too. isintegrated into the programs and routines used to 
origin al ly create the content, e.g., in the form of a dynamic load Hbrary or other 
module. Alternatively, the too. may be a stand-alone program. 

Oearly.the certification too! is intended onlyfor use by a particular licensee, 
and should not be distributed publicly. In the event the security of the too. becomes 

th e,icenseeanewtoolwhichimp,mentsa & esh(uncom P romi S ed)Ucen S e. Thetoo. 
de ,e,es any earlier (Licensed . .) form as necessary, and generates a fresh copy based 
oncurrent .icensing tenns and the remaining contents of the supplied source file. 
Alternative*, a (Licensed... , form may inc.ude a tune stamp so that a Ucense server 
may on.y validate Ucense forms having a time stamp prior to when the too. was 
compromised. 

The tool may be completely self-contained, relying on internal coding and 
encryption mechanism, or may operate in conjunction withaserver maintained bya 
p ^B™.Ai to ^^^•^• ^IW •■■ }taB " ,, 

the license creation server. The license creahon server wou.d then generate the 
of the licensor. 
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T.tnlti laygrLjgsaSSd Software 

The (Licensed ...} form can be extended to support multiple licensor-Ucensee 
unships. For instance, the systentcansupponare.ationshipasshowntnHG. U. 
mthisexa.np.e, the pl u g -ln can be Ucensed to a content provider, develop and 

a user. In this situation the licensor is the content creator/provider and the licensee is 
the user. 

The operations parallel the examples described previously, but are now 
10 extendedtohandletwolicensor-Ucenseerelationship, Ghent 

for content 20 1 to content server 200. Content server 200 responds by sending answer 
602 containing content 201. Plug-in ,03 scans content 20, for {Licensed ...} forms, 
and in this case, encounters two license forms, such as 

8KSS g HS S5S SS =£S Si 

Alternatively, multiple license forms may be combined or nested. 

One {Licensed ...} form relates to a license between a plug-in provider anda 
content provider. Plug-in ,03 contacts 603 plug-in license server 403(a) to vahdate 
20 the related {Ucensed ...} form. License server 403(a) retrieves the appropriate 
infonnationfrom license database 406(a)and send respond 604 to plug-in 103. 
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The other (Licensed ...} form reia.es to a relationship between the content 

server 403(b) to validate the related (Licensed ...} form. License server 403(b) 
brieves the appropnate .nfornration fro. license database 406(b) and sends respond 
606 to plug-in 103. 

Dependingupon the responses rece.ved, 103 plug-in operates on the content 
accordingly. Each of the two (Licensed ...} forms may have different settings, such as 

hcense interactions to be customized accordingly. For instance, the plug-in provider 
„ovidealong cache timeout period forthis particular licensee to minimize traffic 
to the plug-in provider's license server. 

This general scheme is further extended in an additional embodiment of the 
presentinventionsothatlicnsedmodulesmayrefertoeachother. Forinstance, 
separately sourced content and software modules can refer to each other. In CURL, 
15 the form: 

{require <file locator> ...} 
specifies that execution of the module containing the (require ...} form depends on 
access to .mother module identified by the specified file locator, which is typify, a 
Universal Resource Locator ("URL"). When the plug-in encounters such a 
20 dependency.itfetchesandimportsthespecifiedor-required-module.Boththe 

required and requiring module contain (Licensed ...) forms, which may specify the 


PCT/USOO/06242 

WO 00/54128 

-34- 

same or different licenses, licensors, and licensees. In the most general and most 
interesting case, the modules are from different developers. 

For example, company B may provide which-performance high-performance 
Curl audio software, B.curl, of interest to other Curl developers, and company A might 
; pr oduceaCurlapplicaUonA.cm.whichre q uiresB.curl.BothAandBarelicensees 

of Cur. Corporation; but it is useful to provide additional support for A to become also 
a licensee of B, To this end, we provide the system provides a mechanism for allowing 
third-party software vendors to utilize aspects of our invention to administer their 
software licenses. 
L0 The form 

{Licensor <name of licensor> 
<encoded binary data>) } 

appearing withmafi.e is used to establish that the containing content module is subject 
15 to.icensing,restrictionsinadditiontothoseinvolving,heplug-in^ 

licensor section is be plain text, and identifies the licensor (and optionally other 
pertinent details) in human-readable form. The encoded binary data includes, perhaps 
in encrypted form,aURL or other identifier of one or more servers that administer the 
indicated license. In the above example, the form 

20 (Licensor B Corporation 

<encoded binary data>) 

would appear within file B.curl to indicate that its use is subject to licensing restrictions 
imposed by B Corporation. 
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The {require ...} form, which indicates a dependency on external content, may 
include an optional {Licensed ...} form, properly nested as a clause within the 
{require ...} form. The {Licensed ...} clause has a structure and function analogous to 
the {Licensed ...) form already described, except that it is embedded within a 
{require ...} form and indicates that it pertains to a license from the Licensor declared 
in the required module. 

In our example, file A.curl might include the form 

( require "http: //www . B . com/B , curl" 
{Licensed by A 

<encoded binary data>) 

...1 

.herein thehttp://www.B.co m /B.curl isaUKL or other reference to a 
module required by A.cuii„ and wherein the {Licensed ...} clause contains within its 
encoded binary data the components previously described as necessary for B's license 
server to validate A's license status. On encountering one of the above forms within 
Axurl, the plug-in will first load B.curl appropriately satisfying all of its {require ...} 
forms and validating licenses as required. The plug-in will then validate A's use of 
B.curl as previously described, using data from the {Licensed by A ...} form in the 
{require ...} form together with the server identified in the {Licensed ...} form found 
within B.curl. B may provide implicit Ucenses, using B's server to validate each 
{Licensed ...} clause dynamically as previously described. 

As part of A's licensing arrangement with B, A receives a certification tool 
from B which enables A to add the {Licensed ...} clause to the {require ...} form to 
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modules created by A. This tool operates in generally the same fashion as the 
certification tool previously described, except that it generates a clause rather than a 
top-level {Licensed ...} form. 

Using this approach, B is able to license the use of B.curl to A, rather than 
5 simply licensing every use of B.cur.to all of As clients. As illustrated in FIG. 12, B 
can prevent the unlicenced D.curl from using B.curl even whi.e Acurl is gainfully 
using B.curl on a given client. B.curl is dependent on the p.ug : in's ability to segregate 
modules of functionality such that only approved interactions and interdependence 
obtain. Many modem operating systems provide support for this, as do typical 
10 systems for mobile code such as Java (Sun Microsystems, Inc. Inc., Palo Alto, CA) 
and Safe-TCL (The Safe-Tcl Security Model, Jacob Y. Levy and Laurent Demailly, 
Sun Microsystems Laboratories; John K. Ousterhout and Brent B. Welch, Scriptics 
Inc. USENIX Annual Technical Conference (NO 98), 1998, June 15-19, 1998, New 
Orleans, Louisiana, USA). Moreover, B.curl can similarly require licensed software 
, 5 from additional vendors, under separately maintained licenses. In effect, the supplier 

of the plug-in can extend its licensing, advantages to arbitrary software vendors 

Other Embodiments 

Many variants of the described embodiment will be apparent to those skilled in 
the art. For example, some or all of the content may be coded in binary, either as 
20 instructions for a real or virtual machine, or as an intermediate representation requiring 
further interpretation or translation. 
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Various additional data fields may b e included in a {Licensed ...} form relating 
to additional features offered by a client plug-in. For example, a licensor may offer 
additional user authentication features such as requiring a plug-in to request 
identification and password information fromauser, and optionally verify the with the 
5 licensee's server. 

In additional embodiments of the invention, a plug-in may initially contain only 
those instructions needed for interpreting the (Licensed ...}fon» and for loading 
additional modules or plug-ins as may be necessaryto process the content In this case 
the plug-in or (Licensed ...} form will identify at teast one server capable of providing 
10 the additional modules or plug-in, These additional modules are downloaded and 
stored on the client to be used as needed. Optionally, the client may dynamically 
release unused modules depending upon the time oflas, access or such replacement 

m etric. This provides for a very small plug-in as all other modules are subsequently 
downloaded from a server when required to process content and any (Licensed ...} 
15 formcontainedthereinSpaceoccupiedbyreleasedmodulesmaythenbereclaimed 

The mechanism of this invention includes elements of authentication 
and certification that may play useful roles unrelated to the objects of the present 
invention, for example pursuant to privacy or security goals. In applications of the 
20 invention sharing these additional goals, the coding of information within (Licensed 
...} forms may advantageously be combined with other information and mechanism 
serving these additional purposes. The combination of licensing and security 
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The client execution vehicle need not be a browser plug-in as described 
here. It might be an application, applet, dynamical.y linked library (DLL), ActiveX 
5 control, or any other form of executable code. 
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What is claimed is: 

,. A method of licensing digital content, the method comprising. 

subject toalicense, wherein the data includes a license-specific portion; 
determining a status of the license; and 
processing the digital content subject to the status. 

2 . The method of claim 1 wherein examining^ digital content comprises 
searching the digital content for a license statement. 


3. The 
portion. 


me thod of claim 1 wherein the data includes a human readable 


4 . Thentethodofclaimlwhereinthedataincludesanencryptedportion. 

5 . The method of claim 1 wherein determining a status of the license 
comprises determining the status of the license based on the data. 

6 . The method of claim 1 wherein determining a status of the license 
comprises requesting the status of the license from a server. 

7 . The method of claim 6 wherein requesting status from a server further 
comprises sending to the server a portion of the data. 


PCTAJSOO/06242 

WO 00/54128 

-40- 

g. The method of claim 7 wherein the data includes an encrypted portion 
and sendingaportion of the data to the server comprises sending the encrypted 
portion. 

9 Themethodofdaimefurthercomprisingcachingaresponsefromthe 
server, wherein determining a status of the hcense comprises inspecting the cache for a 
response from the server and revesting the status ofthelicense from the server 
responsive to the inspection of the cache. 

10 . The method of claim 9 wherein inspecting the cache comprises: 
finding a cache entry corresponding to the data; and 
determining the validity of the cache entry. 

n . The method of claim 10 wherein determining the validity of the cache 
entry comprises determining drat the cache entry has not expired. 

l2 The method of claim 6 wherein processing the digital content subject to 

determining the status. 

13 Themethodof claim 1 wherein processing the digital content subject 

with determining the status. 
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14. The method of claim 1 wherein the data includes a portion for 
determining whether the digital content has been altered. 

15 . The method of claim 1 wherein processing the digital content comprises 
selectively applying first and second processing routines to the data subject to the 
determined status. 

,6. The method of claim 15 wherein selectively applying first and second 
processing routines to the data comprises applying the first processing routine to the 

data and not applying the second processing routine to the data. 

,7. The method of claim 1 wherein determining a status of the license 
comprises determining that the license is for non-commercial use. 

18. The method of claim 17 further comprising indicating to a user that the 
content is licensed for non-commercial use. 

19. A method of licensing digital content, the method comprising: 
providing first software that embeds in the digital content data 

indicative of a license, the data including a license specific portion; and 
providing second software that: 

identifies the data in the digital content; 
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determines a status of the Ucense indicated by the digital 

content; and 

processes the digital content responsive to the status. 

20. The method of claim 19 wherein identifying the data indicative of a 
Ucense comprises searching the digital content for a license statement. 

21. The method of claim ,9 wherein the data includes a human readable 
portion. 

22. The method of claim 19 wherein the data includes an encrypted portion. 

23 . The method of claim 19 wherein determining the status of the license 
comprises determining the status of the license based on the data. 

24 . The method of claim 19 wherein determining the status of the license 
comprises requesting the status of the license from a server. 

25. The method of claim 24 wherein requesting the status from the server 
further comprises sending a portion of the data to the server. 
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26 . The method of claim 25 wherein the data includes an encrypted portion 
and sending the portion of the data to the server comprises sending the encrypted 
portion. 

27 The method of claim 24 further comprising caching a response from the 
server, wherein determining a status of the Ucense comprises inspecting the cache fora 
response from the server and requesting the status ofthe license from the server 
responsive to the inspection of the cache. 

28. The method of claim 27 wherein inspecting the cache comprises, 
finding a cache entry corresponding to the license; and 
determining the validity ofthe cache entry. 

29. Themethodofclaim^whereindeterminingthevalidityofthecache 
entry comprises determining that the cache entry has not expired. 

30 The method of claim 24 wherein processing the digital content subject 
t0 the determined status comprises processing at least a portion of the digita! content 
in parallel with determining the status. 

31 The method of claim 19 wherein processing the digital content subject 
in parallel with determining the status. 
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32. The method of claim 19 wherein the data includes a portion for 
determining whether the digital content has been altered. 

33. The method of claim 19 wherein processing the digital content 
comprises selectively applying first and second processing routines to the data subject 
to the determined status. 

34. The method of claim 33 wherein selectively applying first and second 
processing routines to the data comprises applying the first processing routine to the 
data responsive to the determined status and not applying the second processing 
routine to the data responsive to the determined status. 

35. The method of claim 19 wherein determining a status of the license 
comprises determining that the license is for non-commercial use of the content. 

36. The method of claim 35 further comprising indicating to a user that the 
content is for non-commercial use. 

37. Apparatus for licensing digital content, the apparatus comprising: 
a general purpose computer; and 

a memory, the memory including programmed instructions for: 

examining the digital content to identify data indicating that the content 
is subject to a license, the data including a license-specific portion; 
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determining a status of the license; and 
processing the digital content subject to the status. 

38. The apparatus of claim 37 wherein examining the digital content 
comprises searching the digital content for a license statement. 

39. The apparatus of claim 37 wherein the data includes a human readable 
portion and an encrypted portion. 

40. The apparatus of claim 37 wherein determining the status of the license 
comprises detenruning the status of the license based on the data. 

41. The apparatus of claim 1 wherein determining the status of the license 
comprises sending a portion of the data to a server and requesting the status of the 
license from the server based on the data . 

42. The apparatus of claim 41 wherein the data includes an encrypted 
portion and sending a portion of the data to the server comprises sending the encrypted 
portion. 

43. The apparatus of claim 41 further comprising caching a response from 
the server, wherein determining a status of the license comprises inspecting the cache 
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for a response from the server and requesting the status of the license from the server 
responsive to the inspection of the cache. 

44. The apparatus of claim 43 wherein inspecting the cache comprises: 
finding a cache entry corresponding to the data; and 

determining that the cache entry has not expired. 

45. The apparatus of claim 41 wherein processing the digital content 
subject to the status comprises processing at least a portion of the digital content in 
parallel with determining the status. 

46. The apparatus of claim 37 wherein processing the digital content 
subject to the status comprises processing at least a portion of the digital content in 
parallel with determining the status. 

47. The apparatus of claim 40 wherein the data includes a portion for 
determining whether the digital content has been altered. 

48. The apparatus of claim 37 wherein processing the digital content 
comprises selectively applying first and second processing routines to the data subject 
to the determined status. 


PCI7US00/06242 

WO 00/54128 

-47- 

49. The apparatus of claim 48 wherein selectively applying first and second 
processing routines to the data comprises applying the firs, processing routine to the 
data and not applying the second processing routine to the data. 

50. The apparatus of claim 37 wherein determining a status of the license 
comprises determining that the license is for non-commercia. use and indicating to a 
user that the content is licensed for non-commercial use. 
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